Tag created resources for permission filters

[Strnadj]

Current configuration leads to too wide open permissions in AWS like:

  policy = jsonencode({
    Version = "2012-10-17",
    Statement = [
      {
        Effect = "Allow",
        Action = [
          # https://github.com/0xPolygonID/issuer-node/blob/main/go.mod#L7
          "kms:Decrypt",
          "kms:Encrypt",
          "kms:GenerateDataKey"
        ],
        Resource = "*"
      },
      {
        Effect = "Allow",
        Action = [
          # https://github.com/0xPolygonID/issuer-node/blob/main/go.mod#L7
          "secretsmanager:GetSecretValue",
          "secretsmanager:DescribeSecret",
          "secretsmanager:CreateSecret",
          "secretsmanager:PutSecretValue",
          "secretsmanager:DeleteSecret",
          "secretsmanager:TagResource",
          "secretsmanager:ListSecrets"
        ],
        # https://github.com/0xPolygonID/issuer-node/blob/main/internal/kms/aws_secret_storage_provider.go#L82
        Resource = "*"
      }
    ]
  })

if you add a tag, it allows to create more restrictive permissions:

Condition = {
  StringEquals = {
    "aws:RequestTag/source" = "polygon-issuer-node"
  }
}